.. / CVE-2023-39002

• XSS
• Nuclei
• Web

Exploit for OPNsense - Cross-Site Scripting (CVE-2023-39002)

Description:

A cross-site scripting (XSS) vulnerability in the act parameter of system_certmanager.php in OPNsense before 23.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Nuclei Template

View the template here CVE-2023-39002.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-39002.yaml

References: